SSA-887249: Multiple Vulnerabilities in the Web Interface of SICAM Q200 Devices
Multiple vulnerabilities were identified in the webserver of Q200 devices. These include Cross Site Request Forgery (CSRF), session fixation, missing secure flags in HTTP cookies and memory corruption issues due to missing input validation that could lead to remote code execution. Siemens has released an update for POWER METER SICAM Q200 family and recommends to update to the latest version.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-31238US | medium4.8 | — | ||
A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-0AA… | ||||
| CVE-2023-30901US | high8.8 | — | ||
A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-0AA… | ||||
| CVE-2022-43546US | high8.8 | — | ||
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50),… | ||||
| CVE-2022-43545US | high8.8 | — | ||
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50),… | ||||
| CVE-2022-43439US | high8.8 | — | ||
A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions < V2.50), POWER METER SICAM Q100 (7KG9501-0AA01-2AA1) (All versions < V2.50), POWER… | ||||
| CVE-2022-43398US | high8.8 | — | ||
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50),… | ||||
references
External citations — patches, advisories, analysis.
- SSA-887249: Multiple Vulnerabilities in the Web Interface of SICAM Q200 Devices - CSAF Versionself
- SSA-887249: Multiple Vulnerabilities in the Web Interface of SICAM Q200 Devices - HTML Versionself
- SSA-887249: Multiple Vulnerabilities in the Web Interface of SICAM Q200 Devices - PDF Versionself
- SSA-887249: Multiple Vulnerabilities in the Web Interface of SICAM Q200 Devices - TXT Versionself
remediations (12)
- MitigationPOWER METER SICAM Q200 family
Do not access links from untrusted sources while logged in at Q200 devices
- MitigationPOWER METER SICAM Q200 family
Do not access links from untrusted sources while logged in at Q200 devices
- MitigationPOWER METER SICAM Q200 family
Do not access links from untrusted sources while logged in at Q200 devices
- MitigationPOWER METER SICAM Q200 family
Do not access links from untrusted sources while logged in at Q200 devices
- MitigationPOWER METER SICAM Q200 family
Do not access links from untrusted sources while logged in at Q200 devices
- MitigationPOWER METER SICAM Q200 family
Do not access links from untrusted sources while logged in at Q200 devices
- FixedPOWER METER SICAM Q200 family
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743592/ - FixedPOWER METER SICAM Q200 family
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743592/ - FixedPOWER METER SICAM Q200 family
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743592/ - FixedPOWER METER SICAM Q200 family
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743592/ - FixedPOWER METER SICAM Q200 family
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743592/ - FixedPOWER METER SICAM Q200 family
Update to V2.70 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743592/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan